Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: RR9hPnRD07vuBtU6PcjafKf0pZqIpVrLYU7woSu0yZs=
Subject key identifier: 66:D8:6F:A9:D9:4A:5C:92:ED:4E:58:C0:74:E0:78:12:EA:C2:1D:B6
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 019FAD88A02E9E59D3989D34A8E1E083C0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 0647
Signing time: Wed 29 Jul 2026 11:00:39 +0000
Manifest this update: Wed 29 Jul 2026 11:00:39 +0000
Manifest next update: Thu 30 Jul 2026 11:00:39 +0000
Files and hashes: 1: 8ZRiGncNcjHqslAWDZvpmqheFTw.roa (hash: s4IpAyjn7GGORIQCaMdBiHmT+ZC8BZOYe6/UFm0+qIQ=)
2: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: Vj0Sz/lKCQ8cYtBBBrus+jXU3b83mDhKjJQzYblaoxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:a0:2e:9e:59:d3:98:9d:34:a8:e1:e0:83:c0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Jul 29 11:00:39 2026 GMT
Not After : Jul 30 11:00:39 2026 GMT
Subject: CN=66d86fa9d94a5c92ed4e58c074e07812eac21db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:6f:d3:f5:b6:54:72:ff:49:f0:8f:c6:01:
16:17:40:12:2c:25:5e:71:a6:c4:20:c4:69:5c:a3:
57:b1:38:b3:98:30:c8:a9:f0:45:d6:52:eb:88:57:
4a:01:0f:46:bc:8d:3c:a2:d6:67:2b:03:a4:f9:63:
0d:7f:00:1b:fa:ad:5e:ce:af:99:e6:fc:fd:ac:ad:
83:23:29:81:36:71:f7:82:c0:2a:19:cf:7f:08:28:
00:42:a1:61:62:65:e6:42:78:9a:90:3c:5a:b0:27:
1c:9b:b1:3d:65:1f:65:cb:42:51:d7:db:4d:12:b3:
9a:b6:b0:a5:23:98:98:03:77:b4:0a:da:4d:1e:61:
48:16:b6:f1:7b:14:74:09:30:2c:94:30:02:06:cf:
34:e2:2c:57:87:33:fd:e0:e0:4c:57:8d:99:80:7b:
2f:48:cd:b2:26:ed:86:7d:4e:89:8b:7b:cb:00:fa:
3d:b1:1e:ef:36:14:8b:4b:88:ee:02:80:a8:dc:39:
ab:8b:ec:3d:f6:09:82:23:ef:9d:47:2c:71:0e:40:
c2:7c:a0:37:e3:ea:99:d1:b6:01:be:f8:3c:cc:c1:
9c:1c:0e:3e:4a:34:e8:a8:74:36:c8:51:61:21:cb:
8c:ea:7e:e9:bd:09:c2:3a:fa:d8:22:27:f7:41:f0:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D8:6F:A9:D9:4A:5C:92:ED:4E:58:C0:74:E0:78:12:EA:C2:1D:B6
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6c:c2:0e:b3:6b:0f:a5:39:d4:18:81:bd:b4:48:0b:72:72:
84:59:ce:3d:e2:b3:55:6d:9d:c7:3d:4c:f5:18:51:30:e2:d4:
1f:7f:65:b0:da:4e:5f:1e:c6:fe:cd:f4:96:ff:18:58:98:99:
49:b0:ba:f4:30:f6:60:7f:e9:8a:27:21:c6:47:6e:74:59:c7:
f6:fc:4a:a6:08:53:8b:08:4b:f4:c9:9c:c5:b6:09:54:44:23:
83:6e:c8:e2:c3:f8:da:58:4b:63:3b:ee:84:3c:d5:31:b1:52:
a1:e1:07:b1:14:7d:e3:d5:36:da:0c:a4:83:0c:cf:7f:42:1e:
d3:a5:5d:8f:2f:83:86:d4:a4:02:01:cb:d8:8a:0a:2c:d2:c4:
88:69:d1:2e:20:01:a4:33:5e:d7:b1:e5:a6:f8:95:2f:21:12:
e7:85:7a:ad:0f:83:01:82:a2:ff:96:57:20:91:b0:24:77:24:
46:24:01:da:72:0c:be:0a:10:58:09:5a:b0:3d:2e:39:7c:33:
43:c6:0a:91:17:f8:0a:01:f0:8a:4c:87:27:0a:22:75:25:bb:
13:d7:1d:b4:3a:6d:6c:8c:98:bf:e0:36:db:1d:d8:0b:c6:df:
9f:4f:09:d9:3a:39:73:9c:73:58:ea:f9:8e:8b:44:dc:34:57:
5a:13:3e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tiKAunlnTmJ00qOHgg8CwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzhjZGNhMTYxNmMzYzZiNWYxOTFmYzMzYTkzNDc4OWIx
MmMwNjkwHhcNMjYwNzI5MTEwMDM5WhcNMjYwNzMwMTEwMDM5WjAzMTEwLwYDVQQD
Eyg2NmQ4NmZhOWQ5NGE1YzkyZWQ0ZTU4YzA3NGUwNzgxMmVhYzIxZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3dv0/W2VHL/SfCPxgEWF0ASLCVe
cabEIMRpXKNXsTizmDDIqfBF1lLriFdKAQ9GvI08otZnKwOk+WMNfwAb+q1ezq+Z
5vz9rK2DIymBNnH3gsAqGc9/CCgAQqFhYmXmQniakDxasCccm7E9ZR9ly0JR19tN
ErOatrClI5iYA3e0CtpNHmFIFrbxexR0CTAslDACBs804ixXhzP94OBMV42ZgHsv
SM2yJu2GfU6Ji3vLAPo9sR7vNhSLS4juAoCo3Dmri+w99gmCI++dRyxxDkDCfKA3
4+qZ0bYBvvg8zMGcHA4+SjToqHQ2yFFhIcuM6n7pvQnCOvrYIif3QfBeBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbYb6nZSlyS7U5YwHTgeBLqwh22MB8GA1UdIwQY
MBaAFCt4zcoWFsPGtfGR/DOpNHibEsBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEt
M2VhYTAzNGE4OTc4LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEtM2VhYTAzNGE4OTc4
LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWzCDrNr
D6U51BiBvbRIC3JyhFnOPeKzVW2dxz1M9RhRMOLUH39lsNpOXx7G/s30lv8YWJiZ
SbC69DD2YH/piichxkdudFnH9vxKpghTiwhL9MmcxbYJVEQjg27I4sP42lhLYzvu
hDzVMbFSoeEHsRR949U22gykgwzPf0Ie06Vdjy+DhtSkAgHL2IoKLNLEiGnRLiAB
pDNe17HlpviVLyES54V6rQ+DAYKi/5ZXIJGwJHckRiQB2nIMvgoQWAlasD0uOXwz
Q8YKkRf4CgHwikyHJwoidSW7E9cdtDptbIyYv+A22x3YC8bfn08J2To5c5xzWOr5
jotE3DRXWhM+Ow==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:29 2026 by rpki-client